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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3/ MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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DETAILED ACTION 



Claim Rejections - 35 USC §112 



1 . The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Claims 1, 48 and 49 are rejected under 35 U.S.C. 112, second paragraph, as 

being indefinite for failing to particularly point out and distinctly claim the subject 

matter which applicant regards as the invention. 

Claims 1 , 48 and 49 recites the limitation "the driver verifer" and "the component" 
in line 8 of page 2, lines 3 and 7 of page 9. There is insufficient antecedent basis for 
this limitation in the claim. For the purpose of this office action the Examiner would 
assume that "the driver verifer" means "the kernel driver verifer" and "the component" 
means "the system component". 



2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 



Claims 48 - 53 are rejected under 35 U.S.C. 102(b) as being anticipated by 
U.S. Pat. No. 5,491,808 to Geist Jr. 

As to claim 48, Geist teaches system component ("...loadable program..." Col. 7 
Ln. 14-29, "...server resident NLM..." Col. 7 Ln. 40-47, "...NLM..." Col. 8 Ln. 1-8, 



Claim Rejections - 35 USC § 102 



States. 
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"...specific NLM..." Col. 9 Ln. 9 - 15), selecting one or more tests for verifying 
functionality of the component ("...memory allocation, deallocation or reallocation call..." 
Col. 7 Ln. 14 - 29, "...original malloc code..." Col. 8 Ln. 16 - 24), modifying a request 
for system services to include execution of the selected tests (".. JMP...thunk..." Col. 7 
Ln. 40 - 63), executing the modified request ("...action..." Col. 7 Ln. 40 - 63) and 
generating errors for any failures ("...log file generator... thread..." Col. 7 Ln. 30 - 36, 57 
-67, Col. 8 Ln. 1 -35, "...error messages..." Col. 10 Ln. 14- 16, 64-67, "...freed 
NULL..." Col. 11 Ln. 1-22). 

As to claim 49, Geist teaches the system component to include a device driver 
("...NLM..." Col. 2Ln. 34-39). 

As to claim 50, Geist teaches the request for system services to include request 
to a kernel component ("...kernel... operating system..." Col. 7 Ln. 14 - 25). 

As to claim 51 , Geist teaches applying the test in order to detect a specific error 
("...freed NULL..." Col. 11 Ln. 1 -22). 

As to claim 52, Geist teaches applying the test to include restricting available 
system resources ("...duplicate block... freed NULL..." Col. 11 Ln. 12-22). 

As to claim 53, see the rejection of claim 48. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
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subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

Claims 1-16 and 27 - 47 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over U.S. Pat. No. 6,047,124 to Marsland in view of U.S. Pat. No. 
5,491,808 to Geist Jr. 

As to claim 1, Marsland teaches a Computer System (System 10), a method for 
monitoring drivers (Method for tracing of Device Drivers Col. 5, Ln. 50-67, Col. 6, Ln. 1 
- 43), receiving a request from a kernel mode driver (Disk Driver 34 Col. 5 Ln. 26 - 37, 
"...driver..." Col. 5, Ln. 45 - 49), determining that the driver is to be monitored (block 60 
Col. 5, Ln. 38 - 67), taking action in the driver verifier to monitor the driver (Tracing 
Device driver 50 Col. 5 Ln. 20 - 37, Driver Trace 63 Col. 6, Ln. 3-14). 

Marsland does not explicitly teach re-vectoring the request to a driver verifier. 
Geist Jr. teaches re-vectoring the request to a driver verifier (Thunking Col. 7, Ln. 14 - 
62). It would be obvious to include the teaching of Geist Jr. to the system of Marsland. 
One would have been motivated to makes such modification so that tracker NLM can 
identify whenever a memory allocation, deallocation or reallocation call occurs and 
make record of that call (Col. 7, Ln. 25 - 29). 

As to claim 2, Marsland teaches the step of receiving a request from a driver to 
include receiving a function call in a kernel component (Col. 4, Ln. 48 - 52). 

As to claim 3, Marsland does not teach the step of checking a registry setting. 
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Geist Jr. teaches teach the step of checking a registry setting ("...flag..." Col. 9, 
Ln. 9-15). It would be obvious to include the teaching of Geist Jr. to the system of 
Marsland. One would have been motivated to makes such modification to prevent 
thunks from being called before ABLK and MSG pool initialization (Col. 9, Ln. 9-15). 

As to claim 4, Marsland teaches a memory allocation request (Event Type Col. 6, 
Ln. 3 - 25) and the step of taking action includes allocating memory space from a 
special pool of memory (Col. 6, Ln. 20 - 25). 

As to claim 5, Marsland is silent with regards to marking memory bounding to 
detect improper memory access. 

Geist Jr. teaches marking memory bounding to detect improper memory access 
("...duplicate block..." Col. 11, Ln. 16-22). It would be obvious to include the teaching 
of Geist Jr. to the system of Marsland. One would have been motivated to makes such 
modification to identify the block of memory causing errors (Col. 1 1 , Ln. 16 - 22). 

As to claim 6, Marsland is silent with regards to a memory deallocation and 
marking deallocated memory space to detect improper access of the deallocated 
memory space. 

Geist Jr. teaches a memory deallocation (Col. 10, Ln 53 - 58) and marking 
deallocated memory space to detect improper access of the deallocated memory space 
(Col. 1 1 , Ln. 8 - 1 1 ). It would be obvious to include the teaching of Geist Jr. to the 
system of Marsland. One would have been motivated to makes such modification to 
identify the block of memory causing errors (Col. 1 1 , Ln. 16 - 22). 
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As to claim 7, Marsland is silent with regard to the step of taking action that 
includes maintaining allocation information in at least one data structure associated with 
the driver. 

Geist Jr. teaches the step of taking action that includes maintaining allocation 
information in at least one data structure associated with the driver (ABLK/MSG Col. 8, 
Ln. 17 - 29). It would be obvious to include the teaching of Geist Jr. to the system of 
Marsland. One would have been motivated to makes such modification in order to later 
generate a log file (Col. 8, Ln. 32 - 35). 

As to claim 8, claim 5 meets claim 8 except for the step of adding data 
corresponding to the allocation request to the data structure. 

Marsland is silent with regard to the step of adding data corresponding to the allocation 
request to the data structure. 

Geist Jr. teaches the step of adding data corresponding to the allocation request to the 
data structure (Col. 8, Ln. 17 - 29). 

As to claim 9, claim 6 meets claim 9, except for the step of removing data 
corresponding to the allocation request from the data structure. 
Marsland is silent with regard to the step of removing data corresponding to the 
allocation request from the data structure. 

Geist Jr. teaches the step of removing data corresponding to the allocation request from 
the data structure (Col. 10, Ln. 53 - 58). 

As to claim 10, Marsland teaches a User Interface (Block 64, Col. 5, Ln. 64 - 67, 
Col. 6, Ln. 1 -2). 
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As to claim 1 1 , Marsland teaches the step of taking action to include validating 
call parameters (Col. 5, Ln. 20 - 29). 

As to claim 12, see the rejection of claim 6. 

As to claim 13, Marsland is silent with reference to the step of taking action that 
includes simulating a low resource condition. 

Geist Jr. teaches the step of taking action that includes simulating a low resource 
condition (Col. 10, Ln. 25 - 44). ). It would be obvious to include the teaching of Geist 
Jr. to the system of Marsland. One would have been motivated to makes such 
modification to perform error checking (Col. 10, Ln. 35 - 38). 

As to claim 14, Marsland is silent with reference to the step of simulating that 
includes failing requests for memory pool allocation. 

Geist Jr. teaches the step of simulating that includes failing requests for memory pool 
allocation (Col. 10, Ln. 25-44). 

As to claim 1 5, Marsland is silent with reference to the step of simulating that 
includes invalidating driver code and data. 

Geist Jr. teaches the step of simulating that includes invalidating driver code and data 
(Col. 10, Ln.25-44). 

As to claim 16, Marsland does not explicitly teach the step of taking action that 
includes checking for timers in deallocated pooled memory. 

Marsland does teach a time stamp events (Col. 2, Ln. 5-10). This inherently means 
that every event that occurs is time stamped including deallocation of pooled memory. 
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As to claim 27, claims 1 , 4 and 5 meets claim 27 except for restricting access to 
area bounding the location. 

Marsland and Geist Jr. do not explicitly teach restricting access to area bounding the 
location. However, Geist Jr. teaches having the "Malloc" return the address of the 
allocated block and of a specified size (Col. 6, Ln. 60 - 67). This implies that this 
specified address is only allocated to a particular driver thereby making it restricted to 
the driver. 

As to claim 28, see the rejection of claim 5. 

As to claim 29, claim 6 meets claim 29 except for restricting access to 
deallocated memory space. 

Marsland does not teach restricting access to deallocated memory space. 
Geist Jr. teaches deallocation of memory (Col. 10, Ln. 45 - 63). It is inherent that all 
deallocated memories are inaccessible until it is allocated, more especially since every 
driver must make a memory request before memory is actually allocated. 
As to claim 30, see the rejection of claim 6. 

As to claim 31 , claims 1 ,4 - 6 meets claim 31 except for determining from the 
tracking whether space remains allocated to the driver at a time when the driver should 
have no space allocated. 

Geist Jr. teaches the step of determining from the tracking whether space remains 
allocated to the driver at a time when the driver should have no space allocated (Col. 6, 
Ln. 9-15). It would be obvious to include the teaching of Geist Jr. to the system of 
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Marsland. One would have been motivated to makes such modification to find memory 
allocation problems (Col. 6, Ln. 6-12). 

As to claim 32, claim 31 meets claim 32 except for the step of generating an 

error. 

Marsland is silent with regard to the step of generating an error. 
Geist Jr. teaches the step of generating an error (Freed NULL Col. 11, Ln. 12 - 22). It 
would be obvious to include the teaching of Geist Jr. to the system of Marsland. One 
would have been motivated to makes such modification to identify the block that is 
causing the error (Col. 1 1 , Ln. 1 2 - 22). 

As to claim 33, Marsland is silent with regard to the step of examining lists 
maintained by a system kernel. 

Geist Jr. teaches the step of examining lists maintained by a system kernel ("message 
block structure...". Col. 11, Ln. 12-22). It would be obvious to include the teaching of 
Geist Jr. to the system of Marsland. One would have been motivated to makes such 
modification to identify the block that is causing the error (Col. 1 1 , Ln. 12 - 22). 

As to claim 34, Marsland is silent with regard to the step of maintaining 
information tracking memory allocated to the driver and deallocated. 
Geist Jr. teaches the step of maintaining information tracking memory allocated to the 
driver and deallocated (Col. 1 1 , Ln. 12 - 22). It would be obvious to include the teaching 
of Geist Jr. to the system of Marsland. One would have been motivated to makes such 
modification to identify the block that is causing the error (Col. 1 1 , Ln. 12 - 22). 
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As to claim 35, claim 1 meets claim 35 except for an operating system that 
includes an interface. 

Marsland teaches an operating system that includes an interface (Network Interface 23 
Col. 4, Ln. 48 - 52). 

As to claim 36, Marsland teaches a Kernel Component (Kernel Memory Space 
14 Col. 3, Ln. 28-38). 

As to claim 37, see the rejection of claim 3. 

As to claim 39, see the rejection of claims 4 and 5. 

As to claim 40, see the rejection of claim 6. 

As to claim 41 , Marsland teaches the step of examining resources allocated to 
the driver (Col. 2, Ln. 5-10). 

As to claim 42, Marsland is silent with regard to the step of tracking outstanding 
memory allocated to the driver. 

Geist Jr. teaches the step of tracking outstanding memory allocated to the driver (ABLK 
Col. 7, Ln. 30 - 36). It would be obvious to include the teaching of Geist Jr. to the 
system of Marsland. One would have been motivated to makes such modification so 
that the log file generator can report the content of ABLK (Col. 8, Ln. 32 - 35). 

As to claim 43, Geist Jr teaches the step of reviewing lists maintained by the 
operating system component for information therein associated with driver (Col. 10, Ln. 
45 - 58). 

As to claim 44, see the rejection of claim 1 1 . 
As to claim 45, see the rejection of claim 14. 
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As to claim 46, see the rejection of claim 1 5. 



As to claim 47, see the rejection of claim 16. 



Response to Arguments 



4. Applicant's arguments filed 4/28/03 have been fully considered but they are not 
persuasive. 

Applicant argues that the prior art reference (Marland) is related to a passive 
tracing device and that the tracing device driver works with a tracing process that 
operates in user memory space. 

Firstly, the tracing of the prior art reference is not passive since the tracing occurs when 
the driver is being configured (Block 62) and the Geist prior art reference discloses the 
tracking system as being dynamic (Col. 5 Ln. 16 - 20). The Examiner agrees that the 
tracing device driver works with a tracing process that operates in user memory space, 
however this does not negate the fact that the tracing device driver and the driver it 
traces operate in kernel memory space and this disclose covers the claim language. 

Applicant also argues that the Geist prior art reference fails cover the re- 
vectoring of the request to a kernel mode driver verifer and having the driver and driver 
verifer operate in the kernel memory space. 

The Geist prior art reference is used to show the intercepting/re-vectoring of a request 
for driver monitoring/tracing. The Marland prior art reference already covers the driver 
verifer/tracing device driver 50 and the driver/disk driver 34 that operates in kernel 
memory space. This notwithstanding, the NLM/Monitor NLM which is the driver/driver 
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verifer operate as part of the operating system (Col. 2 Ln. 34 - 39) and as such operate 
in the kernel memory space. 

Applicant recites the driver verifer that invokes a kernel test function in place of a 
requested kernel function limitation. This limitation is not brought out in the claims and 
as such is not considered. 

Applicant also argues that Examiner incorrectly interpreted the "restricting access 
to areas bounding the location" limitation and as result the Geist and Marsland prior art 
references fails to cover the claimed limitation. 

Applicant seems to suggest in the argument that the monitored/tracked driver or any 
other driver is restricted from accessing memory beyond its assigned memory. 
Firstly, the claim language does not include what driver/program that is restricted from 
accessing the restricted memory area and as such it is not in consideration. Even if the 
reverse were the case, that is if the monitored/tracked driver were to be restricted from 
accessing memory beyond its assigned memory (which is not the case) the Geist prior 
art reference would have still covered the claimed limitation. This is because the 
"malloc" as the Applicant rightfully agrees allocates/assigns specified bytes of 
memory blocks to a driver/program. And the ited memory block are assigned so 
that a driver/program for^> Ajp?* assigned is only allowed to use the 

specified by ^ j ^reason for allocating memory 

block to drive 
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With regards to claim 31 Applicant argues that the Geist prior art reference fails 
to disclose the limitation of determining from the tracking whether space remains 
allocated to the driver at a time when the driver have no space. 
The cited passage in Geist (Col. 6 Ln. 9 - 15) discloses a tracking system that finds 
memory allocation problems that includes unreleased resources. Using NLM 
application/Monitor NLM the tracking system "...can see exactly where unfreed 
memory was originally allocated..." It implies that the tracking system uses the NLM 
application/Monitor NLM to find/determine those memory blocks that were allocated and 
were supposed to have been freed/released but was not, thus covering the claimed 
limitation. 

As regards to Applicant's argument about neither Marsland nor Geist not 
disclosing detecting unreleased kernel resources and not generating an error upon 
driver unload. 

As stated above Geist (Col. 6 Ln. 9 - 15) discloses a tracking system that finds memory 
allocation problems that includes unreleased resources. The unreleased resources are 
memory and memory is a kernel resource although the claim language does not 
explicitly include a kernel resource as the argument suggests. In using the NLM 
application unfreed memory would be found through error code corresponding the 
occurring error (Col. 1 1 Ln. 12 - 22). 



Conclusion 
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5. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Charles E Anya whose telephone number is (703) 305- 
341 1 . The examiner can normally be reached on M - F (First Friday Off) from 8:30 am 
to 5:30 pm. 

The fax phone number for the organization where this application or proceeding 
is assigned is (703) 746-7239. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 



3900. 




Charles E Anya 
Examiner 
Art Unit 2126 




